$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa File: 3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa (raw, json) Hash identifier: 8CZhqFupiYnGt0KPSCNQQeH9YFDPuEo0mPfh+mn8evo= Subject key identifier: 75:6A:19:18:A0:EB:8B:60:EB:88:47:8F:2D:FF:CF:E9:D3:DA:72:7E Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584A268AB25DE08CE0D04F6A93C0 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 23154 IP address blocks: 148.164.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:b2:5d:e0:8c:e0:d0:4f:6a:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=30c8e40e-1d94-4224-8723-5e20713dba0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:01:68:ed:09:e0:75:c5:76:61:0d:d5:e1: 50:d7:d6:6d:47:0a:12:a0:1d:41:ab:2d:a4:70:7a: 82:60:45:98:c8:f1:d7:b1:51:d4:6b:06:8c:f6:4c: 99:c2:5c:9e:3f:b6:f8:70:b2:8e:f4:ff:fd:4c:c2: 23:fb:c3:80:66:c8:79:7d:7f:a2:7b:39:29:64:be: b8:10:41:9e:7e:b4:61:57:b7:95:4e:ea:df:82:7d: ba:14:a2:86:c3:3b:20:c0:fb:fa:dc:66:a1:d5:35: e8:97:32:b3:6a:55:27:c9:42:bd:e8:70:2a:63:00: 41:9b:c8:1b:c0:4b:fd:f9:de:2e:08:8f:f9:0f:8c: 1c:04:a7:dd:41:8d:0d:92:cc:f6:a3:e4:a6:4e:ab: dd:d9:0d:22:4d:8b:e8:5a:23:9b:65:e5:14:c9:e3: e0:76:3d:82:00:fd:0e:fa:26:96:39:ba:c6:bb:5e: 3d:39:1d:13:eb:be:f3:44:c7:c1:ca:a2:83:b0:43: 01:d7:55:11:53:71:88:fa:ee:6c:57:ff:64:a0:c8: 5c:5c:12:16:2a:bd:ad:85:74:53:d6:a7:fe:b0:0a: 23:68:fc:e7:bd:aa:5e:df:a4:1c:e2:af:45:ba:cd: 5f:b8:ae:75:14:40:3a:62:ee:20:e7:c2:6f:24:d0: c4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6A:19:18:A0:EB:8B:60:EB:88:47:8F:2D:FF:CF:E9:D3:DA:72:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ee:87:5e:d6:b4:d0:f3:52:c1:c9:c5:eb:06:f0:3c:fb:57: bd:9a:63:7a:f6:3e:71:03:dc:4b:60:7a:e4:ab:df:92:25:c2: 2e:64:34:c7:40:8a:2c:ee:49:3e:fe:c7:c6:13:10:5d:cc:0a: ed:fd:0e:63:01:d1:29:f0:01:c0:97:e6:0b:8e:42:8b:8f:58: e5:7b:c3:93:98:0f:d6:03:ee:ba:d5:27:61:d5:c7:81:a1:7a: 25:43:c9:f3:4d:ba:31:05:59:3f:b0:19:eb:79:8d:1d:18:d8: e5:26:cd:e7:7e:f3:d6:f7:90:f5:d9:e5:95:5f:ce:b8:1b:9b: 9c:fe:38:60:0a:f9:5d:9e:be:ce:be:8d:a4:7f:3a:bf:4a:00: 87:d6:fa:f6:86:d0:f9:76:01:95:7d:dd:00:ba:83:20:30:e7: 09:27:f2:62:30:67:2c:48:0b:48:2c:7d:55:43:2a:41:c3:e8: 97:df:81:de:af:63:53:e6:17:a0:2c:8b:5d:52:1f:4e:e7:c1: 72:95:50:c7:62:bd:0b:f6:99:e0:64:fa:a8:54:4b:d9:64:8a: 47:98:4b:4d:84:5f:7a:c4:e6:b0:a6:62:0d:f9:4a:f2:50:6f: 73:22:e1:39:31:06:b7:ec:20:82:bd:ef:a8:16:bd:74:4f:8f: 9f:ec:5a:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomirJd4Izg0E9qk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MzBjOGU0MGUtMWQ5NC00MjI0LTg3MjMtNWUyMDcxM2RiYTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndUBaO0J4HXFdmEN1eFQ19ZtRwoSoB1Bqy2k cHqCYEWYyPHXsVHUawaM9kyZwlyeP7b4cLKO9P/9TMIj+8OAZsh5fX+iezkpZL64 EEGefrRhV7eVTurfgn26FKKGwzsgwPv63Gah1TXolzKzalUnyUK96HAqYwBBm8gb wEv9+d4uCI/5D4wcBKfdQY0Nksz2o+SmTqvd2Q0iTYvoWiObZeUUyePgdj2CAP0O +iaWObrGu149OR0T677zRMfByqKDsEMB11URU3GI+u5sV/9koMhcXBIWKr2thXRT 1qf+sAojaPznvape36Qc4q9Fus1fuK51FEA6Yu4g58JvJNDE9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVqGRig64tg64hHjy3/z+nT2nJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvM2IwZTRlYjctMDJiMS0z ODYxLThlODgtNGU4NTQ3Mjc3YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbuh17WtNDzUsHJxesG8Dz7V72aY3r2PnED3EtgeuSr35Ilwi5kNMdA iizuST7+x8YTEF3MCu39DmMB0SnwAcCX5guOQouPWOV7w5OYD9YD7rrVJ2HVx4Gh eiVDyfNNujEFWT+wGet5jR0Y2OUmzed+89b3kPXZ5ZVfzrgbm5z+OGAK+V2evs6+ jaR/Or9KAIfW+vaG0Pl2AZV93QC6gyAw5wkn8mIwZyxIC0gsfVVDKkHD6Jffgd6v Y1PmF6Asi11SH07nwXKVUMdivQv2meBk+qhUS9lkikeYS02EX3rE5rCmYg35SvJQ b3Mi4TkxBrfsIIK976gWvXRPj5/sWiQ= -----END CERTIFICATE-----Generated at Mon Jun 16 10:38:26 2025 by rpki-client